middleapi vulnerabilities
5 published CVEs name middleapi among the affected products.
- 5Published CVEs5 of them scored
- 5Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-103918
@orpc/zod: Prototype injection in smart coercion
middleapi · orpc
Medium6.5 - CVE-2026-103036
@orpc/json-schema: Prototype injection in smart coercion
middleapi · orpc
Medium6.5 - CVE-2026-77360
oRPC: Vary Header Injection in CORS Plugin leading to potential Cache/CORS Bypass
middleapi · orpc
Medium6.3 - CVE-2026-33331
oRPC: Stored XSS in OpenAPI Reference Plugin via unescaped JSON.stringify
middleapi · orpc
High8.2 - CVE-2026-28794
oRPC: Prototype Pollution in `@orpc/client` via `StandardRPCJsonSerializer` Deserialization
middleapi · orpc
Critical9.3